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ABSTRACT 

A method and system for managing access information for users and other entities in 
a distributed computing system is disclosed. In one approach, information relating to user 
access is stored in a centralized directory while user roles are locally defined at a networked 
node. When the user connects to the system, the system looks up the necessary information 
about the user in the central directory to authorize the user. Thereafter, the user's privileges 
are determined by the user's assigned roles. 
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